Security

Signing in

Access is only through Google or Apple. No password is created, stored, or handled here, so there is none to be stolen. Whatever protection you have on that account — including two-step verification — protects this one too.

Separation between accounts

Every stored row carries the account that owns it, and the database enforces ownership on each request rather than trusting the app. A request for another member's ritual, CV, certificates, donations, attendance records, glossary terms, reading list, voice calibration or delivery scores returns nothing, even if it were deliberately crafted.

Uploaded certificates

Certificate files are held in a private store, never a public web address. Each file sits in a folder belonging to your account, and viewing one creates a link that only works for you and expires after ten minutes.

Delivery recordings

A recording of you speaking is sent straight from your device for transcription and scoring, and is discarded as soon as it has been scored. No audio file is ever saved. What is kept is the score, the words heard and the passage they were compared with, all tied to your account alone.

In transit and at rest

All traffic is encrypted over HTTPS, and the database is encrypted on disk with regular backups by the hosting provider.

Your ritual is encrypted

Ritual titles and sections, the words of every passage and prompt, transcripts of your spoken delivery, and the flashcards made from them are scrambled with AES-256 before they are saved. Each member has a personal key, worked out from the app's private master secret and the account identity your sign-in provider gives you. Keys are never stored. Anyone reading the database sees only scrambled text, and one member's key cannot unlock another member's ritual.

The same personal key also scrambles your whole Masonic CV and all your giving records — every gift, regular gift, appeal and target, including names, amounts, dates, Gift Aid and notes — so your dashboard charts and appeals panel can only be worked out on your own signed-in device.

Sensible precautions

• Sign out on shared or borrowed devices.
• Only add material you are permitted to hold in written form.
• Keep your Google or Apple account secured with two-step verification.

Reporting a problem

If you notice anything that looks like a weakness, please report it to the person running this site before mentioning it elsewhere.